Behavioral task
behavioral1
Sample
f54579f9c1c9bb47a3af7f2d687f267f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f54579f9c1c9bb47a3af7f2d687f267f_JaffaCakes118
-
Size
1.3MB
-
MD5
f54579f9c1c9bb47a3af7f2d687f267f
-
SHA1
6cc39c0ff8a565e827de8f0657afc7a575b663bf
-
SHA256
bea767e8e7b9a0aecb608274297673cb948a944b92b98a8f92503ac5bc4175d0
-
SHA512
19764334fab3e4a97d095f813fc69566c37873c15acf8c059ad0780ac18cc2122d7a66b90ebb5bfde0b605c284448744d26c00e2844249036b602afc0437fdc4
-
SSDEEP
24576:4XYdOQ4aywNfddtjWChewlfFwPRospou5uHfZT+5IfP2pfq0e:/0QPymddtSAliJospnu/ZCK+qR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54579f9c1c9bb47a3af7f2d687f267f_JaffaCakes118
Files
-
f54579f9c1c9bb47a3af7f2d687f267f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 979KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icon Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ